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CLOUDFLARE 


Approachable and affordable DNS security 


Replace Cisco Umbrella’s DNS security services with Cloudflare’s global network 
— built for performance — and pay nothing until your contract expires.” 


Challenge with Cisco Umbrella 


With Umbrella, your organization is probably paying 
for capabilities that you don’t really need. Even if 

you prefer ‘set-and-forget’ DNS policymaking, your 
admins will need to adapt their approach over time 


to accommodate new users, devices, and threats. 


Cloudflare capabilities 


Block harmful destinations with 
ransomware, phishing, and more 


Both Gateway and Umbrella 
ingest best-in-class lists of risky 
domains and generate proprietary 
threat intelligence on over 600B 
recursive DNS queries per day. 


With this visibility, Cloudflare 
particularly excels at identifying 
suspicious ‘new’ and ‘newly seen’ 
domains with our own machine 
learning models. 


Limited-time offer 


Speed and reliability around 
the globe with 100% uptime 


Neither Gateway nor Umbrella 
have ever experienced outages in 
their DNS security services. 


But only Cloudflare Gateway is 
built off of the world’s fastest 
public DNS resolver (1.1.1.1). 


Plus, Cloudflare stands behind a 
100% uptime SLA across our 
250+ cities in 100+ countries. 


Cloudflare for DNS security 


Cloudflare Gateway delivers the same rigorous 
security, high speed, and simple management that 
you expect from cloud-native DNS security solutions 
like Cisco Umbrella. 


One policy manager, one device 
client, one unified experience 


In Gateway, admins can set DNS 
security policies with a few clicks 
from a single dashboard. Our 
single device client can be 
flexibly deployed across different 
operating systems. 


Unlike with Cisco’s multi-product 
portfolio, you continue using 
Cloudflare’s single dashboard and 
single client across new services 
and Zero Trust use cases. 


If you currently use Cisco Umbrella’s DNS security services,” 
swap in Cloudflare Gateway today. 


For a limited time...start a Gateway subscription at no charge until the expiration of your current Umbrella contract 
for up to 12 months. After this ‘promotional period, we will aim to beat the price you are paying Cisco for the paid 
period of the subscription. Additional terms and conditions apply.* 
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How it works 
Today, Cloudflare Gateway is commonly used to Users send an encrypted query to Cloudflare. We 
protect remote workers and office locations with decrypt and check the query against policies to block, 
encrypted DNS security. allow, or override it before resolving the domain. 
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*Terms and conditions of the current promotion 


To take advantage of this promotion, you must purchase You are only eligible for this promotion if 
Cloudflare Gateway from Cloudflare by 31 March 2022. You must your existing contract is with Cisco for 
agree to Cloudflare’s standard Enterprise Subscription Agreement DNS Security Essentials, DNS Security 
and to a 12-month minimum term following the expiration of your Advantage, or their equivalent legacy 
current contract. Expiration of your current contract is the Umbrella packages - Professional and 
earliest date at which you can terminate your contract with a Insights. Your participation in this 
minimal or no fee. The price beat does not apply to any promotion is at Cloudflare’s sole 
introductory or promotional price of competitors’. The no charge discretion. Cloudflare reserves the right 
period cannot exceed 12 months. Other usage limits may apply. to discontinue this promotion at any time. 
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Feature comparison 
(as of 01 February 2022) 


Cisco Umbrella DNS Cloudflare Gateway 


Threat protection 

600B+ recursive DNS queries per day v v 

to inform threat intelligence 

Block domain requests and IP responses v wa 

per 13 security risks 

Block direct-to-IP traffic for C2 callbacks 

Selectively applied, depending on plan ¥ All the time in all plans 


Network scale 
Anveast network faotorint 37 locations in 23 countries 250+ locations in 100+ countries 

y P Anycast IPsec does not apply to all locations. Anycast IPsec in all locations 
7 1111 


Public DNS resolver V 208.567.222.222 Ranked the fastest consistently by third parties 


Uptime SLA 99.999% 100% 


Consistent ale creation 


v Integrations with: W Integrations with: 
e Microsoft Active Directory included in e Corporate SSOs (Microsoft Active Directory, 
User attribution and policy creation by DNS-forwarding packages Okta, OneLogin, Ping Identity, and more) 
identity provider e Other identity providers available in e Social identities (GitHub, LinkedIn) 
higher-tier packages, but not available to e Open Source (OIDC, SAML 2.0) 
DNS forwarding services only 


Overrides (respond to all DNS queries for 
a given domain to another destination) 


Administration and management 


Mobile device client Apple or Android (Managed enrollment only) | Apple or Android (Managed and self-enrollment) 


Desktop (roaming) device client © Mac, Windows, Chrome OS Windows, © Mac, Windows, Chrome OS OS © Mac, Windows, Chrome OS, Linux | Windows, © Mac, Windows, Chrome OS, Linux | OS, Linux 


oe AWS S3, Google Cloud Storage, Microsoft Azure 
Log export to cloud storage AWS S3 or Cisco-managed S3 bucket Blob Storage, and more 
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Simplify your Zero Trust journey with Cloudflare 


Switching to Cloudflare Gateway today for DNS Key comparison 
security can streamline your longer term Zero Trust e Our Secure Web Gateway, Zero Trust Network 


adoption. Access, and Browser Isolation solutions are 
Cloudflare brings together many once-distinct natively integrated and built on the same 
security services into a unified platform, called developer platform run on Cloudflare’s network. 
Cloudflare Zero Trust. e By contrast, Cisco’s “acquire-and-stitch” 


approach will have your admins switching 
between multiple interfaces across their 
standalone SWG and ZTNA solutions and 
weaving an overly complex web of inconsistent 
policies over time. 


With Cloudflare, leveling up security with equivalent 
solutions should be easier and more cost-efficient 
than with Cisco. 


Implementation Roadmap 


bat nee Zero Trust 
Quick DNS STEP 2 Full SWG STEP 3 Browsing and 
security _ Inspection _ App Access 
Umbrella 
fafi Umbrella SIG & Duo 
CISCO DNS Beyond 
| STEP 1 
a Gateway Gateway Cloudflare 
CLOUDFLARE (1.1.1.1) (WARP) Zero Trust 


Step 1 Step 2 Step 3 
Security, performance, and ease Cisco Cisco 
of use with Cloudflare: e Slower migration e Different UI / API 
e Expensive upgrade e Different device client 
e The world’s fastest, privacy- e Runs in limited locations e Mostly on-prem 
first DNS resolver (1.1.1.1) 
e Reliable Anycast network vs. Cloudflare vs. Cloudflare 
across 250+ cities e No migration, activate in e Same UI / API 
e 600B+ recursive daily DNS minutes e Same device client 
queries feeding threat intel e No additional cost e Cloud-delivered 


e Runs in all locations 


Contact us today to request your one-on-one engagement with a Cloudflare solution specialist. 
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